CLI: Network Object

You can use the network-object command to create a new network object or modify the properties of an existing network object.

Configuring network objects

network-object <name> {subnet|location|subnet-report}

To create a new network object:

[no] network-object <name>

To add a subnet to a network object:

network-object <name> subnet <ip-address> <netmask or mask length>

<name> - The name of the network object
<ip-address> - The IPv4 or IPv6 address
<netmask or mask length> - The IPv4 netmask or mask length. E.g. 255.255.255.0 or /24

To set the location of the network object with respect to the appliance:

network-object <name> location {internal, external, inherit}

location internal - Specify that IP addresses in this network object are on the internal (LAN) side of the appliance
location external - Specify that IP addresses in this network object are on the external (WAN) side of the appliance.
location inherit - Specify that the location is automatically inherited from parent network objects. For, if all subnets in this network object fall within an existing network object that is has a location of internal, this network object will also be internal.

To include this network object in the subnet report:

network-object <name> subnet-report

E X A M P L E

Create a network object called 'localServer' that is an internal host on 192.168.1.1/255.255.255.255, and enable subnet reporting:

network-object localServer subnet 192.168.1.1 /32

network-object localServer location internal

network-object localServer subnet-report

E X A M P L E

Create an network object called 'IPv6 Server' that is an external host on 2001:db8::1234:5678/128

network-object "IPv6 Server" subnet 2001:db8::1234:5678 /128

network-object "IPv6 Server" location external

To see whether inherit resolved to internal or external:

show network-object <name>